This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.mft File: SkOJ_pH5oSTHdvibsh7gfD5-ZHk.mft (raw, json) Hash identifier: oI0tWUmt4eNkLsEsoa+xqbuDikk5rZA5o8DRDs9AXZI= Subject key identifier: C2:5F:C2:A7:83:5C:53:CF:20:F9:E8:77:BA:A4:F0:50:1F:07:D7:E3 Authority key identifier: 4A:43:89:FE:91:F9:A1:24:C7:76:F8:9B:B2:1E:E0:7C:3E:7E:64:79 Certificate issuer: /CN=A916CDAC/serialNumber=4A4389FE91F9A124C776F89BB21EE07C3E7E6479 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.mft Manifest number: 34 Signing time: Tue 23 Dec 2025 06:23:13 +0000 Manifest this update: Tue 23 Dec 2025 06:23:12 +0000 Manifest next update: Tue 30 Dec 2025 06:23:12 +0000 Files and hashes: 1: SkOJ_pH5oSTHdvibsh7gfD5-ZHk.crl (hash: SGkPqkH4V9XwTHtLmSK5pRB31dN4Hik9SPHusCF4bLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.crl rsync://rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDAC, serialNumber=4A4389FE91F9A124C776F89BB21EE07C3E7E6479 Validity Not Before: Dec 23 06:23:12 2025 GMT Not After : Dec 30 06:23:12 2025 GMT Subject: CN=694a3551-4840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fe:cd:8b:97:ba:65:9e:c2:ae:80:f3:08:2f: fb:24:ef:72:9e:f8:26:b9:52:8f:66:6a:11:35:42: ce:6e:2f:0b:19:fa:1b:1b:b8:0b:6f:94:7f:00:ab: de:b2:24:df:d2:e9:e3:26:18:26:cc:5e:9d:3b:35: 59:d5:d7:c3:0a:c8:64:03:e1:4f:fa:28:30:1e:9c: 71:09:ce:f4:8b:69:e2:95:34:2f:b0:02:53:0f:88: 2e:8a:3d:66:fb:30:14:4d:3b:48:16:6b:94:a9:6f: c0:28:09:5f:99:b3:3f:2a:65:17:4d:62:d6:1a:48: e3:0d:52:f2:d6:03:f3:86:53:d1:85:5c:91:d0:22: af:48:05:26:fe:75:68:05:78:35:25:85:d6:70:ec: 58:f0:9f:5c:bb:be:52:e8:d5:6b:72:12:04:f9:45: b2:62:96:fa:ef:b7:3a:9d:79:d0:c5:50:57:79:4c: c2:36:86:8d:8b:63:58:6f:ac:48:49:26:0f:d2:9d: 0a:4d:af:e1:d1:aa:73:a7:de:39:1d:92:d4:51:61: 35:92:a4:c5:f8:04:f8:f5:ba:a4:c8:28:c0:99:e8: 2d:c1:6f:37:3b:df:93:ba:82:4b:5d:6a:19:b2:ed: c2:7e:b4:4e:ed:dc:98:c3:7d:6b:42:c1:7b:28:0d: 70:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:5F:C2:A7:83:5C:53:CF:20:F9:E8:77:BA:A4:F0:50:1F:07:D7:E3 X509v3 Authority Key Identifier: keyid:4A:43:89:FE:91:F9:A1:24:C7:76:F8:9B:B2:1E:E0:7C:3E:7E:64:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:15:36:8b:2b:bb:24:23:31:c9:30:db:7a:3d:f6:95:5d:06: 34:35:0a:13:22:80:4f:d7:34:0b:9b:1f:bf:8a:f4:0d:ba:f1: 28:46:63:54:03:85:b7:b2:f2:90:40:5b:9c:3c:07:da:a7:30: 43:a4:9e:ae:d7:ea:d4:72:34:95:a5:d3:40:d4:f0:2a:15:75: 10:ad:22:1e:b8:49:2f:b5:58:53:07:9f:6b:13:45:80:d1:79: 75:ef:a2:b8:e3:ce:72:49:74:9a:b9:1e:53:e8:af:19:62:eb: 50:12:84:0b:70:35:e6:cf:68:e5:25:6c:d6:ec:06:22:43:1a: cb:71:22:f5:7f:68:13:77:07:75:82:d5:dd:0a:c5:c5:44:5b: 4b:25:19:f7:fd:4e:90:bf:1c:a5:e3:3b:1b:88:e0:55:2c:b3: 7a:bf:4c:90:5c:d8:bb:e3:7b:2c:c0:20:c4:0f:c0:2c:34:26: 27:b1:f6:46:d2:a4:cf:96:51:5c:56:9b:d1:4a:4c:2c:7f:86: 5b:d0:3b:5b:81:f6:f5:c0:7b:09:4c:fe:94:81:a2:6d:a3:1a: b3:f3:14:5a:0c:f3:55:f6:14:b9:e3:1d:fe:95:2e:ef:a7:d1: 79:54:0a:5b:1b:ec:86:95:2c:e9:1a:c0:a1:c4:e8:6b:f0:aa: 0e:29:98:65 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 Q0RBQzExMC8GA1UEBRMoNEE0Mzg5RkU5MUY5QTEyNEM3NzZGODlCQjIxRUUwN0Mz RTdFNjQ3OTAeFw0yNTEyMjMwNjIzMTJaFw0yNTEyMzAwNjIzMTJaMBgxFjAUBgNV BAMMDTY5NGEzNTUxLTQ4NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9/s2Ll7plnsKugPMIL/sk73Ke+Ca5Uo9mahE1Qs5uLwsZ+hsbuAtvlH8Aq96y JN/S6eMmGCbMXp07NVnV18MKyGQD4U/6KDAenHEJzvSLaeKVNC+wAlMPiC6KPWb7 MBRNO0gWa5Spb8AoCV+Zsz8qZRdNYtYaSOMNUvLWA/OGU9GFXJHQIq9IBSb+dWgF eDUlhdZw7Fjwn1y7vlLo1WtyEgT5RbJilvrvtzqdedDFUFd5TMI2ho2LY1hvrEhJ Jg/SnQpNr+HRqnOn3jkdktRRYTWSpMX4BPj1uqTIKMCZ6C3Bbzc735O6gktdahmy 7cJ+tE7t3JjDfWtCwXsoDXBjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwl/Cp4Nc U88g+eh3uqTwUB8H1+MwHwYDVR0jBBgwFoAUSkOJ/pH5oSTHdvibsh7gfD5+ZHkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDREFDLzgyQzBBQTIwOEYz OTExRjA4NjMyQTAzOUM0RjlBRTAyL1NrT0pfcEg1b1NUSGR2aWJzaDdnZkQ1LVpI ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU2tPSl9wSDVvU1RIZHZpYnNoN2dmRDUtWkhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD REFDLzgyQzBBQTIwOEYzOTExRjA4NjMyQTAzOUM0RjlBRTAyL1NrT0pfcEg1b1NU SGR2aWJzaDdnZkQ1LVpIay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJkVNosruyQjMckw23o99pVdBjQ1ChMigE/XNAubH7+K9A268ShGY1QD hbey8pBAW5w8B9qnMEOknq7X6tRyNJWl00DU8CoVdRCtIh64SS+1WFMHn2sTRYDR eXXvorjjznJJdJq5HlPorxli61AShAtwNebPaOUlbNbsBiJDGstxIvV/aBN3B3WC 1d0KxcVEW0slGff9TpC/HKXjOxuI4FUss3q/TJBc2LvjeyzAIMQPwCw0Jiex9kbS pM+WUVxWm9FKTCx/hlvQO1uB9vXAewlM/pSBom2jGrPzFFoM81X2FLnjHf6VLu+n 0XlUClsb7IaVLOkawKHE6Gvwqg4pmGU= -----END CERTIFICATE-----Generated at Wed Dec 24 19:29:44 2025 by rpki-client